The small print

Privacy policy

What we collect when you order, book, hire or get in touch, why, who else handles it, how long we keep it and your rights.

Last updated 21 October 2026.

Who we are

The Batch House, The Glass Yard, Sheffield Road, Chesterfield S41 8JY, is operated by The Bank House Bar & Restaurant Ltd, registered in England and Wales under company number 10348087, whose registered office is The Glass House, Hathersage Hall Business Centre, Main Road, Hathersage, Hope Valley S32 1BB. That company is the controller of the personal information described here, and "we" on this page means it. The Batch House is part of The Northern Collective.

For anything on this page, email hellobatchhouse@outlook.com or write to us at either address above.

The short version

We collect what we need to take your order, answer your messages, arrange bookings and private hire, run the free Wi-Fi and keep the hall safe with CCTV. We do not sell it or share it for anyone else's marketing, and we only send you marketing if you have asked for it. This website has no forms or advertising trackers. It sets the cookies it needs in order to work, and Google Analytics cookies to count visits only if you agree to them.

The kitchens

The Batch House Bar and Batch House Bakery are run by us. The other kitchens are independent businesses: when you order and pay at one of their own tills, that kitchen takes your payment through its own card provider and is responsible for any information it collects. This policy covers The Batch House, the bar and the bakery, ordering through the QR code on your table, the free Wi-Fi, CCTV, and this website.

What we collect, and why

When you order by QR code. Table ordering is provided by Stampede, our ordering platform. When you order, Stampede collects what you order, your table, any notes you add (including allergies or preferences), the details it asks you for, such as your name, email address or phone number to send your receipt and order updates, and your payment. Your card is handled by Stampede's payment provider: we never see or store your full card number. We use the order to prepare and serve it, to deal with any problem with it, and to keep our accounts. The lawful basis is the contract between us, and our legal obligations for the accounting records.

Stampede acts as our data processor, handling this information on our instructions rather than for its own purposes. Stampede is operated by Stampede AI Ltd, registered in Scotland under company number SC503985, at Clockwise, Commercial Quay, 84 Commercial Street, Edinburgh EH6 6LX, and holds data on hosted services in the Republic of Ireland. Ordering takes place on Stampede's own web page, which has its own privacy notice and sets its own cookies.

When you email or message us, for example to save space for a group, ask about private hire, give feedback or ask about lost property: your name, your contact details and whatever you tell us, such as a date, the number of people or an access need. We use it to reply and to arrange what you have asked for. The lawful basis is taking the steps you have asked for before a booking, the booking itself, or our legitimate interest in answering questions and feedback.

When you pay a deposit. If we ask for a deposit for a group booking or private hire, you pay it through a secure payment link from our payment provider. We receive confirmation of the payment, the amount and the booking it belongs to, but never your full card number. We use it to hold your booking and account for the deposit (the contract between us, and our legal obligations for the accounting records).

When you use our free Wi-Fi. Guest Wi-Fi is provided through Stampede. To connect, you sign in on Stampede's page, which asks for details such as your name and email address, or lets you sign in with a social media account, and records technical details of your device (such as its hardware address) and when and for how long you connect. We use this to provide the Wi-Fi, keep the network secure and prevent misuse, and to understand how busy the hall is (our legitimate interests). The sign-in page may also ask whether you would like to hear from us about offers and events. That is optional, we only email you if you say yes, and every email has an unsubscribe link (your consent, which you can withdraw at any time). Stampede runs the Wi-Fi as our data processor.

CCTV. CCTV is in operation inside and around The Batch House, and signs show where. It is there to keep customers and staff safe and to help prevent and detect crime, which is our legitimate interest. Recordings are kept for around 30 days and then overwritten automatically, unless they are needed to investigate an incident, in which case the relevant footage is kept for as long as that takes. We only share footage with the police or other authorities, our insurers or legal advisers, where that is necessary. If you would like footage of yourself, email us with the date, time and where you were, within the 30 days while it still exists.

Allergies and health information. Information about an allergy or a medical condition is a special category of personal information. We only use it, with your consent, to help keep you safe when you order or book, and only share it with the kitchen or staff who need it.

Photographs at events. We sometimes take photographs or short videos at events and around the hall for our website and social media, relying on our legitimate interest in showing what goes on here. If you would rather not appear, tell the person taking them or a member of staff, and if you spot yourself in something we have posted and want it taken down, email us.

On social media. When you follow, message or tag us on Facebook, Instagram or TikTok, we see what those platforms show us. Their own privacy policies govern how they handle your information.

When you visit this website. Our web server keeps ordinary access logs, including the address your request came from, your browser type and which pages you asked for. They are used to keep the site running and secure (our legitimate interest), not to identify anyone.

Counting visits. If you say yes in the cookie pop-up, we use Google Analytics to see how many people visit, which pages they find useful and roughly where they come from. It records your device and browser type, the pages you look at, the site that sent you and an approximate location worked out from your IP address, and sets two cookies to tell repeat visits apart. We only see totals and trends, never who you are, and we have not turned on Google's advertising features. The lawful basis is your consent: say no, or change your mind later from "Cookie settings" at the bottom of every page, and Google Analytics does not run. Google acts as our data processor for this.

Parking. The car park is owned and operated by a separate company, which is responsible for its own system, including registering cars for longer stays, any number-plate cameras and parking charges. Its privacy notice, not this one, covers that information.

Who else handles it

  • Stampede, for table ordering and payment and for the free Wi-Fi, as described above.
  • Our payment provider, when you pay a deposit by payment link.
  • Microsoft, which provides our email (our address is an Outlook address), so messages you send us are held on its services.
  • Our website host, which runs this website and its access logs on our behalf.
  • Google, which provides Google Analytics, only if you agree to analytics cookies.
  • The kitchen preparing your food, which sees the details of your order it needs to make it, including any allergy you have told us about.
  • Other companies in The Northern Collective, only where they help us run The Batch House or answer your enquiry.
  • Our insurers and professional advisers, and the police or other authorities where the law requires it or to prevent or detect crime, including CCTV footage.

We do not sell, rent or trade your information, and nobody uses it for their own marketing.

Outside the UK

Stampede holds data in the Republic of Ireland, and our email provider and Google Analytics may store or access data outside the UK, including in the United States. Where information leaves the UK it is protected by UK adequacy regulations or by the safeguards UK data protection law requires, such as the International Data Transfer Agreement.

How long we keep it

  • Orders, deposits and payment records: six years, because tax law requires it.
  • Wi-Fi sign-in details: two years from your last visit, then deleted.
  • Marketing consent: until you unsubscribe, and a record that you did after that.
  • CCTV recordings: around 30 days, then overwritten, unless needed for an incident.
  • Emails and messages about bookings, private hire, feedback or lost property: two years from our last contact with you.
  • Allergy or access information you give us for a booking: only until the booking has taken place.
  • Photographs and videos we have published: for as long as they are in use, unless you ask us to remove them.
  • Website access logs: a matter of weeks.
  • Google Analytics visit data: 14 months, then deleted automatically.

If you ask us to delete something sooner, we will, unless it is a record we are legally required to keep, in which case we will tell you so.

Keeping it safe

This website is only served over an encrypted connection. Access to our inbox and systems is limited to the people who need it, and the companies that handle information for us are bound to keep it secure.

Your rights

You can ask us for a copy of the personal information we hold about you, and ask us to correct it, delete it, restrict how we use it, pass it to you or another organisation in a usable format, or stop using it. You can object to anything we do on the basis of our legitimate interests, and withdraw any consent you have given at any time. To do any of these, email hellobatchhouse@outlook.com. It is free, and we will reply within a month. We may need to confirm who you are first.

If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put things right first.

Children

This website is not aimed at children, and we do not knowingly collect information from children except as part of an adult's order or booking.

Cookies

This website sets two cookies that it needs in order to work, and two Google Analytics cookies only if you agree to them. Our cookie policy explains them.

Changes to this policy

If we change how we use your information, we will update this page and the date at the top.